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AMENDMENTS TO THE CLAIMS 



(Currently amended} _ Ina ^ocngutCT s>^ern_ HrPYL^j^S accessjo^^ l^east ope secmie ^_ 

resource upon authentication of a user where said user authenticatioa is performed by an 
authentication server in remote commimicatioo witii a client In use |yy said user, a method 
of saving said user authentication for use when said authentication server b unavailable^ 
ttie method comprisi ng the steps oft 

^bmjtting ajjser aithoUfcadq^^ to s^d authentic^on seiyei^ 

jOI^srppnse toa succ^afiil user autiientication^ 

^eoeiving^ ffii_auiheniicated jKer_w^ Js unigue to said user; 

^ring said^auAentic^ed CTcdwitiaJ on $dd cUentjiiilks^ secun^_ine$pd to 

prevent tampering with the credential; 

^ing smd auUi^ti^ed mde^^ 

in response to an unsuccessfal user authentjcation: 

determining whether said authentication server is in operative communication with 
said client: 

in response to a determination that said authenticarion server is not In operative 
communication whh said client: 

searching said client for a stored authenticated credential corresponding to said 



in resiwnse to finding an authenticated credential corresponding to said user, 
; said stored autlienticated credential to access said at least one secure 



using? 

resource while said authentication server is not in operative communication with 
said client; and 

in response to not finding an authentica ted credential corresponding to said user, 
felling the user authentication request 

Zi... (£^lF?^^^^?i^S^} ^The m^od of c[aiin_l_ figtfier comgrjsi ng tiie steps of: 



[Cl] 



A 



A 



Pctcted=[ai 



Detetedl <^ rapoflse to m 

<^ ddcnoiiini^ vidKther said 
imd^litii3ui.iQii ^BVBT u in Dpsiitrvs 
j' ^ iw m iitUfl yrijwt with t&id dicot^ 
^^l^ni icspORSB to a liBtBiuimtian duA 

said tuiheuifiatkB sennerb not ia 
OpoiBtfvB ooRimoniontian wMi mid 

-4lt6sea«fains said di^it ^ n stpnd 
nnf hntttfawte d cKidciuial cQgcBj ODdigg to 
saidmertl 

<!iKkiMi rBi|)OiiSBto finding SD 
fluflkCDtie&led citdcstisl conc^xKidin^ to 

ci«deDii£lto acccai ssid at least one 

in MS|MUO to fiflt fifidtfi^ aa 
flulbeuticated oottentii)] oomsiiQadsigto 
sod lEBS^ fining tfie nttf ftudMatifi^fifi 
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communication with said client: 



A 



^^^R.^^^^^S}^^^-^yj^^9^ 3^^^^^^A.^^^^3[, 991^99!'}^^^ to said ^-^'^ 

user : and 

^imgsaidiser^authgitica^ ' ^ 



^ (Current];^ _ T!?^ IP^^J'i'j^/ A^?^f L QJjgBgsfn ^ tirie step oir -* 



A 

on said client to access $aid at least one secure resoufce d^^ending on a defined 
sensitivity of said at least one resource. 



I^A Deleted: [c4] 
^ (Cun^nth^ amend^) The mediodof 5laijp_t_wher6in said secung^methpd isencjxi>tion_ _ ^ " * 

of the credential. 



1^ { Deleted: [cs] 

Infrastructure. 



4. (Cunentji^attiend^ „T!i^5i.?ftP^J>/f lajfPA?^??ifL^^ ^ 

based Public Key .fofrastnicture. 



I ........ ^-i Deleted:^ 

Uiu _ (CuirentixS?*S?4^)-T?l^?Pi^^i>?J^^^ 



of the credential. 



I . . . jpLiireny^ amended) The methodjof clai^ §^i?DtX.TS5'P^ J1?*^1MfJ^SX. ^ " " " ^^^^^^^ 

infirastructure. 



I, f Dcictaii fL:T] 
^ iCurrentjx amendi^ _Tbe nieft_05d_of_claiin_2 s^urityraetfipd Js hardware^ 



based Public Key Infiastructuie. 
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4fl?CQ4n?°i^)'^!Sfi?^£4). „?P„%S9J9E41^§r system ]^9?J^I^3J?9?? . 

resource upon authentication of a user where said user autfaendcation is performed by an 
authentication server in remote communicadon via a secure gateway vfhh a client In use 
by said user, a method of caching said user authentication for use when said 
authentication server is unavailable^ the method comprisin g^tfie steps of : 

submitting a jiiser auth^d^ to said authemua^ ?I?Y^ . 

^ J^PpDse to A^i*^^-^^ uso; auth en tjc^i on ; ^ 

^cejving an fuiOiendc^d uscr crcdentiaJ whichjs unigue to said user^ ^ 

^^JlPlS-^A^d^^f 9^?$ § seairit^ methpdto , 

prevent tampering wi^ Ae credential; 

^i1PSJ^4-'?H?^J^P?*?^ crcdentiflJ pnsaidj^dewayu^^ I^H^^f^P^i? - 
prevent tamperiofi wftibt the credential; 

4^l?i^^J^!^^AH^l'?^^??^?4 p^sdeiitial to access said atjeast one secure resoiirc^_ _ ^ ^ 

in response to an unsuccessful user authentication: 

determining whether said authentication server is in operative communication with 

said client: 

in response to a detennination that said authentication server is not in opergtive 

oommumcation with said client: 

determining w hether said gateway is in operative communication whh said 

client 

in response to a deteimingtion that said gateway is not m operative 

communication with said client; 

seaichinfr the client for an authenticated credential corresponding to 

said user: 

in response to jinding an authenticated credential corresponding to 

said user, using said authenticated credential to access said at least 
one secure resource while said gateway Is not in operative 
communicatioa with said client: 

in response to not finding an authenticated credential corresponding to 



A 



[olOJ 



„^ Petetecfc « 



A 



A 



Delattd:- 



Fonnstted: Indent: Left -ao$-, 
Hanging: X^,Tab5: 03",t£ft + 

a94', Left + 131", L£ft + 1.75^, 
Left-h Z2S", L£ft-hNQtat 0.88" 



said user, failing the user authentication request 
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jj^l . (CurrentlY anaended) The gieftod of cl^dm lO^finlhe 



Icll] 



4jijfS|>pi»e tt)_a dete^^ isin opejratiye 

I 

communication with said client: \ 

searching th^e gatew^for an audienti^^ ored^dai OMTMponding to^ \ 

it 

said user: * ' 

jjD response to findin^m a^ ^l^?1^1^59?£^?^^£i2 ^ \ 

user» using said authenticated credential to access said at least one 
secure resource; 

response to not finding an autfientia^^credenpal,co^ to 
said user» foiling Uie user auliicsnticatioii request; 
jn responsejo ajddfam^ !P-*iRPS¥iyp- 
conununication with said client 

^rasing^ fr?5».lijg JPY «*ft?ntic?rted t \\s22!£S2L 

said user; 

^rasjng^froTpJhe gatev^ an^ ay(^^tfeaied_q^^ 
to said user: and 

4^jiP£Jb^l?sjeTaiuflienti^^ 



» in icspgnse t9 iw 



drteiTnhrin|f mhaher Bgid 

sBivtK is i& upuulivB 

in lesL^vusfitO Q cfafBi iiiiiiMt'On that 
ttid tethcaticftiiQfi server is oot k 
qKTstivc wnnnonicatkm Mrith Hid 

is in wpoj^vc conomiiiiaaJtion with 

cbBt said QBtev^ is not in opoBdve 
oommunitation wilh Aid eKent:^ 

- setsching tibe client ibr OD 
«titfaeaticaled cKdeadBl coucspoodii^ to 

. in fcapofiM to Itedtfig an 
aulfaeiitioted crcdeotiBl coficspoodins to 

l&]d Q96t^ n<lftg s&id tUtfatttififlttd 

cicdcstial to access said «t ka&t QiK 



fiulhcfiticsted credential eonespoodiD^ Co 
said mac, &alm^ tlit u 
rcqucet: 



■ 



Deleted} - 



DelelBd: 



42. (Cuggodv gnewlcd^ The meAod^pf c[wm_U^ ^'"'"^ 

Jmplementing a of securityj)plicies Jiniitin^ ^^.4^^/ (l^i?£^..?§4^1^^-^^^ ^ 
on said dient Of 00 said gateway to access said at laast one secure resource depending on 
a defined sensitivity of said at least one resource. 



l^j^Current^amCTdedl Tb® ™?!?l9^-9f 5l^JA^&^'f ^P-^*l?^!?^^ l?^???EXPi^^-.- 

of the cradentlal. 



I (Cunend^^flmen^^ The meAc^ of clam tt^Public^ , ^ 

Key bifi^structure. 
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I ^•f Petetedt {ci5i 

based Public Ki&y iofrastiucaire. 



1^ i DQiottd: (cl6] 

of the credentiaL 



1 j^Cugentlj^amendedX The lPJthodj5f c[a^ is_Pubjic^ , ^ ^ " " ^ — 

Key Jjofrastructuie. 



based Public fCey lofiastnicture. 
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